EIP-2026-113857

This exploit demonstrates a SQL injection vulnerability in the WordPress KNR Author List Widget plugin <= 2.0.0. The vulnerable code directly interpolates user-controlled input from the 'listItem' GET parameter into an SQL query without sanitization, allowing arbitrary SQL execution.